# Vulnerabilities published in 2023


- [CVE-2023-3520](https://insights.sbomify.com/CVE-2023-3520/): Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in it-novum/openitcockpit (medium 4.3)
- [CVE-2023-35194](https://insights.sbomify.com/CVE-2023-35194/): Command injection in Surf SOHO HW1 (high 7.2)
- [CVE-2023-35193](https://insights.sbomify.com/CVE-2023-35193/): Command injection in Surf SOHO HW1 (high 7.2)
- [CVE-2023-35192](https://insights.sbomify.com/CVE-2023-35192/): Privilege escalation in Intel(R) GPA Framework software (medium 6.7)
- [CVE-2023-35191](https://insights.sbomify.com/CVE-2023-35191/): Denial of service in Intel(R) SPS firmware versions (medium 6.8)
- [CVE-2023-3519](https://insights.sbomify.com/CVE-2023-3519/): Citrix NetScaler ADC and NetScaler Gateway Code Injection (critical 9.8, exploited in the wild)
- [CVE-2023-35189](https://insights.sbomify.com/CVE-2023-35189/): Iagona ScrutisWeb Unrestricted Upload of File with Dangerous Type (critical 10.0)
- [CVE-2023-35188](https://insights.sbomify.com/CVE-2023-35188/): SQL Injection Remote Code Execution Vulnerability (high 8.0)
- [CVE-2023-35187](https://insights.sbomify.com/CVE-2023-35187/): SolarWinds Access Rights Manager Directory Traversal Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-35186](https://insights.sbomify.com/CVE-2023-35186/): SolarWinds Access Rights Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability (high 8.0)
- [CVE-2023-35185](https://insights.sbomify.com/CVE-2023-35185/): SolarWinds Access Rights Manager OpenFile Directory Traversal Remote Code Execution Vulnerability (medium 6.8)
- [CVE-2023-35184](https://insights.sbomify.com/CVE-2023-35184/): SolarWinds Access Rights Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-35183](https://insights.sbomify.com/CVE-2023-35183/): SolarWinds Access Rights Manager Incorrect Default Permissions Local Privilege Escalation Vulnerability (high 7.8)
- [CVE-2023-35182](https://insights.sbomify.com/CVE-2023-35182/): SolarWinds Access Rights Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-35181](https://insights.sbomify.com/CVE-2023-35181/): SolarWinds Access Rights Manager Incorrect Default Permissions Local Privilege Escalation Vulnerability (high 7.8)
- [CVE-2023-35180](https://insights.sbomify.com/CVE-2023-35180/): SolarWinds Access Rights Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability (high 8.0)
- [CVE-2023-3518](https://insights.sbomify.com/CVE-2023-3518/): JWT Auth in L7 Intentions Allow For Mismatched Service Identity and JWT Providers for Access (high 7.4)
- [CVE-2023-35179](https://insights.sbomify.com/CVE-2023-35179/): 2FA/MFA Bypass Vulnerability in Serv-U 15.4 (high 7.2)
- [CVE-2023-35178](https://insights.sbomify.com/CVE-2023-35178/): Memory corruption in HP LaserJet Pro (high 8.8)
- [CVE-2023-35177](https://insights.sbomify.com/CVE-2023-35177/): Memory corruption in HP LaserJet Pro (high 8.8)
- [CVE-2023-35176](https://insights.sbomify.com/CVE-2023-35176/): Memory corruption in HP LaserJet Pro (high 8.8)
- [CVE-2023-35175](https://insights.sbomify.com/CVE-2023-35175/): Server-side request forgery in HP LaserJet Pro (critical 9.8)
- [CVE-2023-35174](https://insights.sbomify.com/CVE-2023-35174/): Livebook Desktop's protocol handler can be exploited to execute arbitrary command on Windows (high 8.6)
- [CVE-2023-35173](https://insights.sbomify.com/CVE-2023-35173/): End-to-End encrypted file-drops can be made inaccessible (medium 5.7)
- [CVE-2023-35172](https://insights.sbomify.com/CVE-2023-35172/): Nextcloud Server password reset endpoint is not brute force protected (high 8.7)
- [CVE-2023-35171](https://insights.sbomify.com/CVE-2023-35171/): Nextcloud Server vulnerable to open redirect on "Unsupported browser" warning (medium 4.1)
- [CVE-2023-3517](https://insights.sbomify.com/CVE-2023-3517/): Hitachi Vantara Pentaho Data Integration & Analytics - Improper Control of Resource Identifiers ('Resource Injection') (high 8.5)
- [CVE-2023-35169](https://insights.sbomify.com/CVE-2023-35169/): php-imap vulnerable to RCE through a directory traversal vulnerability (critical 9.1)
- [CVE-2023-35168](https://insights.sbomify.com/CVE-2023-35168/): DataEase has a privilege bypass vulnerability (medium 6.5)
- [CVE-2023-35167](https://insights.sbomify.com/CVE-2023-35167/): When setting EntityOptions.apiPrefilter to a function, the filter is not applied to API requests for a resource by Id (medium 5.0)
- [CVE-2023-35166](https://insights.sbomify.com/CVE-2023-35166/): Privilege escalation (PR) from account through TipsPanel (critical 10.0)
- [CVE-2023-35165](https://insights.sbomify.com/CVE-2023-35165/): AWS CDK EKS overly permissive trust policies (medium 6.6)
- [CVE-2023-35164](https://insights.sbomify.com/CVE-2023-35164/): Unauthorized users can manipulate a dashboard created by an administrator in DataEase (medium 6.3)
- [CVE-2023-35163](https://insights.sbomify.com/CVE-2023-35163/): Vega's validators able to submit duplicate transactions (medium 6.0)
- [CVE-2023-35162](https://insights.sbomify.com/CVE-2023-35162/): XPlatform Wiki vulnerable to cross-site scripting via xcontinue parameter in preview actions template (critical 9.7)
- [CVE-2023-35161](https://insights.sbomify.com/CVE-2023-35161/): XWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in DeleteApplication page (critical 9.7)
- [CVE-2023-35160](https://insights.sbomify.com/CVE-2023-35160/): XWiki Platform vulnerable to reflected cross-site scripting via back and xcontinue parameters in resubmit template (critical 9.7)
- [CVE-2023-35159](https://insights.sbomify.com/CVE-2023-35159/): XWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in deletespace template (critical 9.7)
- [CVE-2023-35158](https://insights.sbomify.com/CVE-2023-35158/): XWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in restore template (critical 9.7)
- [CVE-2023-35157](https://insights.sbomify.com/CVE-2023-35157/): XWiki Platform vulnerable to reflected cross-site scripting via delattachment action (high 8.5)
- [CVE-2023-35156](https://insights.sbomify.com/CVE-2023-35156/): XWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in delete template (critical 9.7)
- [CVE-2023-35155](https://insights.sbomify.com/CVE-2023-35155/): XWiki Platform vulnerable to cross-site scripting in target parameter via share page by email (high 8.8)
- [CVE-2023-35154](https://insights.sbomify.com/CVE-2023-35154/): Knowage-Server vulnerable to account validation bypass (high 7.2)
- [CVE-2023-35153](https://insights.sbomify.com/CVE-2023-35153/): XWiki Platform vulnerable to stored cross-site scripting in ClassEditSheet page via name parameters (critical 9.1)
- [CVE-2023-35152](https://insights.sbomify.com/CVE-2023-35152/): XWiki Platform vulnerable to privilege escalation (PR) from account through like LiveTableResults (critical 10.0)
- [CVE-2023-35151](https://insights.sbomify.com/CVE-2023-35151/): XWiki Platform may show email addresses in clear in REST results (high 7.5)
- [CVE-2023-35150](https://insights.sbomify.com/CVE-2023-35150/): XWiki Platform vulnerable to privilege escalation (PR) from view right via Invitation application (critical 9.9)
- [CVE-2023-3515](https://insights.sbomify.com/CVE-2023-3515/): Open Redirect in go-gitea/gitea (low 3.0)
- [CVE-2023-35149](https://insights.sbomify.com/CVE-2023-35149/): Jenkins Digital.ai App Management Publisher Plugin missing permission checks (medium 6.5)
- [CVE-2023-35148](https://insights.sbomify.com/CVE-2023-35148/): Jenkins Digital.ai App Management Publisher Plugin vulnerable to Cross-Site Request Forgery (medium 6.5)
- [CVE-2023-35147](https://insights.sbomify.com/CVE-2023-35147/): Arbitrary file read vulnerability in Jenkins AWS CodeCommit Trigger Plugin (medium 6.5)
- [CVE-2023-35146](https://insights.sbomify.com/CVE-2023-35146/): Jenkins Template Workflows Plugin vulnerable to Stored Cross-site Scripting (medium 5.4)
- [CVE-2023-35145](https://insights.sbomify.com/CVE-2023-35145/): Jenkins Sonargraph Integration Plugin vulnerable to Stored Cross-site Scripting (medium 5.4)
- [CVE-2023-35144](https://insights.sbomify.com/CVE-2023-35144/): Stored XSS vulnerability in Jenkins Maven Repository Server Plugin (medium 5.4)
- [CVE-2023-35143](https://insights.sbomify.com/CVE-2023-35143/): Stored XSS vulnerability in Jenkins Maven Repository Server Plugin (medium 5.4)
- [CVE-2023-35142](https://insights.sbomify.com/CVE-2023-35142/): SSL/TLS certificate validation disabled by default in Jenkins Checkmarx Plugin (high 8.1)
- [CVE-2023-35141](https://insights.sbomify.com/CVE-2023-35141/): Jenkins CSRF protection bypass vulnerability (high 8.0)
- [CVE-2023-35140](https://insights.sbomify.com/CVE-2023-35140/): Privilege escalation in GS1900-24EP firmware (medium 5.5)
- [CVE-2023-3514](https://insights.sbomify.com/CVE-2023-3514/): RazerCentralSerivce Unsafe Named Pipe Permission Escalation of Privilege Vulnerability (high 7.8)
- [CVE-2023-35139](https://insights.sbomify.com/CVE-2023-35139/): Cross-site scripting in USG FLEX 50(W) series firmware (medium 5.2)
- [CVE-2023-35138](https://insights.sbomify.com/CVE-2023-35138/): Command injection in NAS326 firmware (critical 9.8)
- [CVE-2023-35137](https://insights.sbomify.com/CVE-2023-35137/): Auth bypass in NAS326 firmware (high 7.5)
- [CVE-2023-35136](https://insights.sbomify.com/CVE-2023-35136/): Other in ATP series firmware (medium 5.5)
- [CVE-2023-35134](https://insights.sbomify.com/CVE-2023-35134/): Weintek Weincloud Weak Password Recovery Mechanism for Forgotten Password (high 7.4)
- [CVE-2023-35133](https://insights.sbomify.com/CVE-2023-35133/): Moodle: ssrf risk due to insufficient check on the curl blocked hosts (high 7.5)
- [CVE-2023-35132](https://insights.sbomify.com/CVE-2023-35132/): Moodle: minor sql injection risk on mnet sso access control page (medium 6.3)
- [CVE-2023-35131](https://insights.sbomify.com/CVE-2023-35131/): Moodle: xss risk on groups page (medium 6.1)
- [CVE-2023-3513](https://insights.sbomify.com/CVE-2023-3513/): RazerCentralService Unsafe Deserialization Escalation of Privilege (high 7.8)
- [CVE-2023-35128](https://insights.sbomify.com/CVE-2023-35128/): Integer overflow in GTKWave (high 7.0)
- [CVE-2023-35127](https://insights.sbomify.com/CVE-2023-35127/): Fuji Electric Tellus Lite V-Simulator Stack-based Buffer Overflow (high 7.8)
- [CVE-2023-35126](https://insights.sbomify.com/CVE-2023-35126/): Memory corruption in Ichitaro 2023 (high 7.8)
- [CVE-2023-35124](https://insights.sbomify.com/CVE-2023-35124/): Information disclosure in OAS Platform (low 3.1)
- [CVE-2023-35123](https://insights.sbomify.com/CVE-2023-35123/): Denial of service in Intel(R) Server Platforms (medium 5.9)
- [CVE-2023-35121](https://insights.sbomify.com/CVE-2023-35121/): Privilege escalation in Intel(R) oneAPI DPC++/C++ Compiler software (high 7.8)
- [CVE-2023-35120](https://insights.sbomify.com/CVE-2023-35120/): PiiGAB M-Bus Cross-Site Request Forgery (high 8.8)
- [CVE-2023-3512](https://insights.sbomify.com/CVE-2023-3512/): Relative path traversal in Setelsa Security ConacWin CB (high 7.5)
- [CVE-2023-35116](https://insights.sbomify.com/CVE-2023-35116/): Denial of service in fasterxml:jackson-databind (medium 4.7)
- [CVE-2023-35110](https://insights.sbomify.com/CVE-2023-35110/): jjson vulnerable to stack exhaustion (high 7.5)
- [CVE-2023-3511](https://insights.sbomify.com/CVE-2023-3511/): Incorrect Authorization in GitLab (low 2.0)
- [CVE-2023-3510](https://insights.sbomify.com/CVE-2023-3510/): FTP Access <= 1.0 - Subscriber+ Stored XSS (medium 5.4)
- [CVE-2023-35098](https://insights.sbomify.com/CVE-2023-35098/): WordPress NextGen GalleryView Plugin <= 0.5.5 is vulnerable to Cross Site Scripting (XSS) (high 7.1)
- [CVE-2023-35097](https://insights.sbomify.com/CVE-2023-35097/): WordPress WP Affiliate Links Plugin <= 0.1.1 is vulnerable to Cross Site Scripting (XSS) (high 7.1)
- [CVE-2023-35096](https://insights.sbomify.com/CVE-2023-35096/): WordPress myCred Plugin <= 2.5 is vulnerable to Cross Site Request Forgery (CSRF) (medium 5.4)
- [CVE-2023-35095](https://insights.sbomify.com/CVE-2023-35095/): WordPress Flo Forms Plugin <= 1.0.40 is vulnerable to Cross Site Scripting (XSS) (medium 5.9)
- [CVE-2023-35094](https://insights.sbomify.com/CVE-2023-35094/): WordPress WP Matterport Shortcode Plugin <= 2.1.4 is vulnerable to Cross Site Scripting (XSS) (medium 6.5)
- [CVE-2023-35093](https://insights.sbomify.com/CVE-2023-35093/): WordPress MasterStudy LMS Plugin <= 3.0.8 is vulnerable to Broken Access Control (medium 6.5)
- [CVE-2023-35092](https://insights.sbomify.com/CVE-2023-35092/): WordPress breadcrumb simple Plugin <= 1.3 is vulnerable to Cross Site Scripting (XSS) (medium 5.9)
- [CVE-2023-35091](https://insights.sbomify.com/CVE-2023-35091/): WordPress WooCommerce Stock Manager Plugin <= 2.10.0 is vulnerable to Cross Site Request Forgery (CSRF) (medium 4.3)
- [CVE-2023-35090](https://insights.sbomify.com/CVE-2023-35090/): WordPress MasterStudy LMS Plugin <= 3.0.8 is vulnerable to Cross Site Scripting (XSS) (medium 6.5)
- [CVE-2023-3509](https://insights.sbomify.com/CVE-2023-3509/): Incorrect Authorization in GitLab (low 3.7)
- [CVE-2023-35089](https://insights.sbomify.com/CVE-2023-35089/): Cross-site request forgery in Recipe Maker For Your Food Blog from Zip Recipes (medium 4.3)
- [CVE-2023-35088](https://insights.sbomify.com/CVE-2023-35088/): Apache InLong: SQL injection in audit endpoint (critical 9.8)
- [CVE-2023-35087](https://insights.sbomify.com/CVE-2023-35087/): ASUS RT-AX56U V2 & RT-AC86U - Format String - 2 (critical 9.8)
- [CVE-2023-35086](https://insights.sbomify.com/CVE-2023-35086/): ASUS RT-AX56U V2 & RT-AC86U - Format String -1 (high 7.2)
- [CVE-2023-35085](https://insights.sbomify.com/CVE-2023-35085/): Integer overflow in UniFi Access Points (critical 9.0)
- [CVE-2023-35084](https://insights.sbomify.com/CVE-2023-35084/): Deserialization in Endpoint Manager (critical 9.8)
- [CVE-2023-35083](https://insights.sbomify.com/CVE-2023-35083/): Path traversal in Endpoint Manager (medium 6.5)
- [CVE-2023-35082](https://insights.sbomify.com/CVE-2023-35082/): Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass (critical 10.0, exploited in the wild)
- [CVE-2023-35081](https://insights.sbomify.com/CVE-2023-35081/): Ivanti Endpoint Manager Mobile (EPMM) Path Traversal (high 7.2, exploited in the wild)
- [CVE-2023-35080](https://insights.sbomify.com/CVE-2023-35080/): Misconfiguration in Secure Access Client (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/288/